CloudOps Engineer

Kyper - Fully remote, B2B

Kyper is the agentic downtime partner for heavy industry. Mining and oil & gas operators lose millions every hour to unplanned downtime - our platform stops it. We read from customer historians, SCADA, CMMS, and OEM systems, run continuous anomaly detection on top, and draft results back into the workflows the customer already uses. That platform runs across multiple customer environments. We need someone who owns it.

Don't apply if

• Your production experience is mostly dev or staging clusters.

• You prefer to wait for tickets rather than push improvements unprompted.

• You are loyal to one cloud and dismissive of the others.

• You have never been on-call or owned a production incident end-to-end.

• Your AI tooling stops at chat interfaces and basic IDE autocomplete.

• You need a fixed 9-to-5. Customers span Japan to Alaska, so we trade strict hours for flexibility on both ends.

• You expect a senior infra team above you to make the hard calls. We are small - this role is the senior infra perspective.

The role

You are cloud-agnostic by reflex. You stand up environments, you keep them healthy, you make them cheap, and you make them reproducible. You think in Terraform and Kubernetes, but you do not religious-war the cloud. You pick the right tool for the customer and the workload, then ship it.

Networking and security are core to this job, not afterthoughts. Our customers run heavy-industry infrastructure with strict OT/IT boundaries, isolated networks, on-prem historians, and varied appetite for cloud. You will walk into a customer's environment, understand their reality, and propose how their data gets from their servers to ours - securely, reliably, and in a way their IT and compliance teams will actually approve. You will defend that architecture in front of customer engineers who know their network better than you ever will.

You will be the person who decides how Kyper's platform is run. That is a lot of leverage and a lot of responsibility.

What you'll do

• Stand up production-grade environments across GCP, AWS, and Azure for new customer deployments.

• Own infrastructure as code: Terraform modules, Kubernetes manifests, CI/CD, secrets, networking, security posture.

• Design and propose customer data ingestion architectures: on-prem to cloud connectivity, secure transport, identity, firewalling, network segmentation. You sit in customer calls and you draw the diagram their IT will sign off on.

• Build the deployment workflows that let ML and product engineers ship without waiting on you.

• Monitor, observe, and harden: logs, metrics, alerts, cost controls, security baselines, incident response.

• Push toward cloud-agnostic patterns where they pay back, and pragmatic single-cloud choices where they don't.

You bring

• 5+ years of commercial cloud / DevOps / SRE / platform engineering experience in environments with real customers and real consequences.

• Deep Terraform, deep Kubernetes, fluent in at least two of GCP / AWS / Azure.

• Strong networking and security: VPCs, peering, VPN, private interconnect (Interconnect / Direct Connect / ExpressRoute), IAM at scale, secrets management, zero-trust patterns. This is non-negotiable for the role.

• Real on-prem to cloud integration experience. You have shipped data from a customer's datacenter into a cloud platform and you can defend the trade-offs of every option (site-to-site VPN, dedicated interconnect, message queue bridge, agent + push, secure file drop).

• Comfort sitting in front of a customer's IT, OT, and security teams and proposing a data-shipping architecture they will actually approve.

• Experience running production workloads under load, not just dev clusters.

• Strong scripting (Python or Go), CI/CD-first mindset, bias toward simple and observable systems.

Bonus

• ML / data platform experience: Vertex AI, SageMaker, MLflow, Ray, Spark on Kubernetes.

• Industrial / OT exposure: PLCs, SCADA, historians, OPC UA, MQTT, ISA-95, Purdue model.

• Compliance experience: SOC 2, ISO 27001, or sector-specific (NERC CIP, IEC 62443).

• FinOps mindset and proven cost reductions you can point to.

You will fit Kyper if you

• Are productive with AI code agents and modern AI-assisted development workflows. If you have never built a Claude Code skill or subagent, set up an MCP server, run a personal knowledge system like Obsidian, or chained AI tools into a real workflow, your AI usage is probably too basic for what we need.

• Move fast, learn fast, and adapt quickly.

• Can take ideas and POCs all the way to production. This is a must-have skill.

• Are willing to dive into whatever challenges are needed to get things done.

How we work

You will own the platform layer end-to-end. No dedicated SRE team behind you, no waiting on a central infra group. The autonomy is real, and the impact is direct.

Our customers are world-class at heavy industry, not at cloud or modern software. Their IT and OT environments reflect that history - varied, sometimes legacy, sometimes locked down, sometimes wide open in surprising places. The information you need about their networks, constraints, and quirks will not arrive neatly documented. You will have to dig it out.

Fully remote on a B2B contract. Quarterly team co-locations in Warsaw. Customers span Japan to Alaska, and production doesn't watch the clock - the occasional out-of-hours call or incident comes with the role. The trade is real flexibility on the rest of your time.